about the local policy and the group policy

[Guest]

I have a question.
For example, there are 40 computer in the domain, and these computers can be
seperated to 2 OU, one is student, the other is teacher. I add the policy
that removes the shut down button for the whole domain, but now just one
teacher want to show the shut down button in his computer. what shall I do?
(I know the group policy can override the local policy when the computer
login the domain.) I don't want to bind the policy only to student, because
just one teacher has this requirement.

Is there any good idea?

thank you!

 

[barabba]

You can further filter the scope of Group Policies by means of
Security Groups.
For a Group Policy to be applied, both Read and Apply rights must be
assigned to the group or user who the GP should be applied to (default
is Authenticated Users, which means all users or workstations
contained in the OU to which the GP is linked).

Bye
Bar

 

[Guest]

I have the same situation but not for the shut down. What I do is create a
new GPO that reverses the setting in the "all users" GPO. For example I have
a GPO for all users that removes the run command we do have some users who
require this access so I created another GPO that turns this back on. Then I
create a group and assign this group to the GPO and remove all other groups.
I hope this makes some sense to you.